A statistical study of covert timing channels using network packet frequency

Author(s):  
Fangyue Chen ◽  
Yunke Wang ◽  
Heng Song ◽  
Xiangyang Li
2016 ◽  
Vol 10 (6) ◽  
pp. 1130-1141 ◽  
Author(s):  
Changda Wang ◽  
Yulin Yuan ◽  
Lei Huang

Author(s):  
Yali Liu ◽  
Dipak Ghosal ◽  
Frederik Armknecht ◽  
Ahmad-Reza Sadeghi ◽  
Steffen Schulz ◽  
...  

2019 ◽  
Vol 82 ◽  
pp. 105546 ◽  
Author(s):  
Omar Darwish ◽  
Ala Al-Fuqaha ◽  
Ghassen Ben Brahim ◽  
Ilyes Jenhani ◽  
Athanasios Vasilakos

2018 ◽  
Vol 25 (6) ◽  
pp. 38-44 ◽  
Author(s):  
Yu-an Tan ◽  
Xiaosong Zhang ◽  
Kashif Sharif ◽  
Chen Liang ◽  
Quanxin Zhang ◽  
...  

Sensors ◽  
2020 ◽  
Vol 20 (8) ◽  
pp. 2417 ◽  
Author(s):  
Shorouq Al-Eidi ◽  
Omar Darwish ◽  
Yuanzhu Chen

Covert timing channels are an important alternative for transmitting information in the world of the Internet of Things (IoT). In covert timing channels data are encoded in inter-arrival times between consecutive packets based on modifying the transmission time of legitimate traffic. Typically, the modification of time takes place by delaying the transmitted packets on the sender side. A key aspect in covert timing channels is to find the threshold of packet delay that can accurately distinguish covert traffic from legitimate traffic. Based on that we can assess the level of dangerous of security threats or the quality of transferred sensitive information secretly. In this paper, we study the inter-arrival time behavior of covert timing channels in two different network configurations based on statistical metrics, in addition we investigate the packet delaying threshold value. Our experiments show that the threshold is approximately equal to or greater than double the mean of legitimate inter-arrival times. In this case covert timing channels become detectable as strong anomalies.


Sign in / Sign up

Export Citation Format

Share Document